Report Overview

  1. Submitted URL

    entions-cusage.icu/10477bcb-3bcd-4d70-ad75-ec870e0c4ea8/2

  2. IP

    18.194.134.212

    ASN

    #16509 AMAZON-02

  3. Submitted

    2023-02-03 13:23:02

    Access

  4. Website Title

  5. Final URL

  6. Tags

  7. urlquery detections

    No alerts detected

Detections

  2. urlquery

    0

  3. Network Intrusion Detection

    1

  4. Threat Detection Systems

    2

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
ocsp.digicert.com862012-05-21T09:02:23Z2023-03-13T06:00:13Z
firefox.settings.services.mozilla.com8672020-06-04T22:08:41Z2023-03-13T05:09:10Z
ocsp.pki.goog1752018-07-01T08:43:07Z2023-03-13T05:09:47Z
push.services.mozilla.com21402014-10-24T10:27:06Z2023-03-13T05:09:14Z
www.youtube.com902013-04-13T09:43:20Z2023-03-13T05:09:12Z
finance-ru.comunknown2016-01-03T18:16:34Z2023-03-06T23:56:33Z
googleads.g.doubleclick.net422021-02-20T16:43:32Z2023-03-13T08:39:16Z
jnn-pa.googleapis.com26402021-11-16T07:12:21Z2023-03-13T08:11:18Z
www.google.com72015-05-10T13:11:19Z2023-03-13T06:40:43Z
i.ytimg.com1092012-10-03T19:11:04Z2023-03-13T08:43:01Z
r3.o.lencr.org3442020-12-02T09:52:13Z2023-03-13T05:09:07Z
content-signature-2.cdn.mozilla.net11522020-11-03T13:26:46Z2023-03-13T05:09:35Z
contile.services.mozilla.com11142021-05-27T20:32:35Z2023-03-13T05:09:13Z
fonts.googleapis.com88772013-06-10T22:14:26Z2023-03-13T08:14:31Z
notix.io147652020-08-20T15:14:00Z2023-03-13T08:13:06Z
img-getpocket.cdn.mozilla.net16312018-06-22T01:36:00Z2023-03-13T05:09:16Z
static.doubleclick.net3332012-06-26T18:16:24Z2023-03-13T08:46:37Z
yt3.ggpht.com2032014-01-15T17:55:17Z2023-03-13T05:09:16Z
www.finpronance.comunknown2020-11-23T13:05:40Z2023-03-09T11:26:07Z
entions-cusage.icu5186912020-08-27T10:38:41Z2023-03-10T14:14:56Z
fonts.gstatic.comunknown2014-09-09T02:40:21Z2023-03-13T08:44:36Z

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

SeveritySource IPDestination IPAlert
mediumClient IPInternal IP
ET INFO DNS Query for Suspicious .icu Domain

Threat Detection Systems

OpenPhish

No alerts detected


PhishTank

No alerts detected


Fortinet's Web Filter
SeverityIndicatorAlert
mediumfinance-ru.com/javascripts/iframe-step2.min.jsPhishing

mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


JavaScript (273)

HTTP Transactions (80)

URLIPResponseSize
entions-cusage.icu/10477bcb-3bcd-4d70-ad75-ec870e0c4ea8/2
18.194.134.212302 0 B
r3.o.lencr.org/
23.33.119.27200 OK503 B
r3.o.lencr.org/
23.33.119.27200 OK503 B
r3.o.lencr.org/
23.33.119.27200 OK503 B
ocsp.digicert.com/
93.184.220.29200 OK280 B
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK939 B
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
34.160.144.191200 OK5.3 kB
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK12 B
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK329 B
r3.o.lencr.org/
23.33.119.27200 OK503 B
ocsp.digicert.com/
93.184.220.29200 OK280 B
ocsp.pki.goog/gts1c3
216.58.211.3200 OK947 B
ocsp.pki.goog/gts1c3
216.58.211.3200 OK865 B
push.services.mozilla.com/
54.148.77.40101 Switching Protocols0 B
ocsp.pki.goog/gts1c3
216.58.211.3200 OK471 B
ocsp.pki.goog/gts1c3
216.58.211.3200 OK472 B
fonts.googleapis.com/css?family=Libre+Franklin%3A300%2C300i%2C400%2C400i%2C600%2C600i%2C800%2C800i&subset=latin%2Clatin-ext&display=fallback
142.250.74.106200 OK8.6 kB
ocsp.pki.goog/gts1c3
216.58.211.3200 OK4.0 kB
ocsp.pki.goog/gts1c3
216.58.211.3200 OK472 B
ocsp.pki.goog/gts1c3
216.58.211.3200 OK472 B
r3.o.lencr.org/
23.33.119.27200 OK503 B
ocsp.pki.goog/gts1c3
216.58.211.3200 OK471 B
www.youtube.com/s/player/97ea7458/www-player.css
142.250.74.174200 OK50 kB
www.youtube.com/s/player/97ea7458/www-embed-player.vflset/www-embed-player.js
142.250.74.174200 OK110 kB
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
142.250.74.35200 OK15 kB
www.youtube.com/s/player/97ea7458/fetch-polyfill.vflset/fetch-polyfill.js
142.250.74.174200 OK2.8 kB
fonts.gstatic.com/s/librefranklin/v13/jizDREVItHgc8qDIbSTKq4XkRiUf2zc.woff2
142.250.74.35200 OK27 kB
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
142.250.74.35200 OK16 kB
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
142.250.74.35200 OK16 kB
ocsp.pki.goog/gts1c3
216.58.211.3200 OK471 B
ocsp.pki.goog/gts1c3
216.58.211.3200 OK471 B
ocsp.pki.goog/gts1c3
216.58.211.3200 OK472 B
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
142.250.74.35200 OK28 kB
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfABc4EsA.woff2
142.250.74.35200 OK9.6 kB
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2
142.250.74.35200 OK9.6 kB
fonts.gstatic.com/s/righteous/v13/1cXxaUPXBpj2rGoU7C9WiHGF.woff2
142.250.74.35200 OK13 kB
ocsp.pki.goog/s/gts1p5/M5tFESCmO9o
216.58.211.3200 OK472 B
ocsp.pki.goog/s/gts1p5/M5tFESCmO9o
216.58.211.3200 OK472 B
r3.o.lencr.org/
23.33.119.27200 OK503 B
r3.o.lencr.org/
23.33.119.27200 OK503 B
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc5300360-6063-4d18-8dd2-28dbcf47d371.jpeg
34.120.237.76200 OK14 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F64144d1c-f524-496f-8b52-ba63714dbfc5.jpeg
34.120.237.76200 OK12 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F524a46fd-88eb-4539-9d8b-1ac679ae5990.jpeg
34.120.237.76200 OK8.2 kB
finance-ru.com/step-2/ficrm/Quantum-System-RU-1-PART?clickid=wen0bi267fu795cm216v94ca&tracking=voluum&campaignId=10477bcb-3bcd-4d70-ad75-ec870e0c4ea8&campaignName=FICRM+-+QUANTUM+SYSTEM+-+RU+-+1+STEPS+-+1+PART&trafficSource=1dd169ec-8d44-41e2-9760-ff67f9e9d920
172.67.128.16200 OK17 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b4ea648-021a-44ef-a083-3ea03f73dca3.jpeg
34.120.237.76200 OK11 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F49d52576-44b1-4baf-92c0-88f267415a19.jpeg
34.120.237.76200 OK6.0 kB
ocsp.pki.goog/gts1c3
216.58.211.3200 OK472 B
ocsp.pki.goog/gts1c3
216.58.211.3200 OK471 B
static.doubleclick.net/instream/ad_status.js
142.250.74.166200 OK29 B
googleads.g.doubleclick.net/pagead/id
172.217.21.162302 Found0 B
ocsp.pki.goog/gts1c3
216.58.211.3200 OK471 B
ocsp.pki.goog/gts1c3
216.58.211.3200 OK472 B
fonts.gstatic.com/s/roboto/v20/KFOiCnqEu92Fr1Mu51QrEzAdLw.woff2
142.250.74.35200 OK17 kB
fonts.googleapis.com/css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRighteous%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&ver=5.7.8
142.250.74.106200 OK30 kB
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
142.250.74.106200 OK31 kB
ocsp.pki.goog/gts1c3
216.58.211.3200 OK471 B
www.google.com/js/th/wBNXk7Q6V2dkHawik5TUb6id0fydDqlxfrWFyJdQ6Xw.js
216.58.207.228200 OK14 kB
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
142.250.74.106200 OK31 kB
notix.io/event
139.45.240.92200 OK0 B
ocsp.pki.goog/gts1c3
216.58.211.3200 OK472 B
ocsp.pki.goog/gts1c3
216.58.211.3200 OK472 B
i.ytimg.com/vi/AJshl3TO4ZQ/sddefault.jpg?sqp=-oaymwEmCIAFEOAD8quKqQMa8AEB-AH-CYAC0AWKAgwIABABGGUgXyhSMA8=&rs=AOn4CLBEusFvAdbAHVcR3tyADpzWsSTixA
216.58.207.214200 OK22 kB
i.ytimg.com/vi/fmM9N-ZufTU/sddefault.jpg?sqp=-oaymwEmCIAFEOAD8quKqQMa8AEB-AH-CYAC0AWKAgwIABABGGUgYChQMA8=&rs=AOn4CLD-4_sbMzezW_AmYz4PW1rIml_44w
216.58.207.214200 OK31 kB
ocsp.pki.goog/gts1c3
216.58.211.3200 OK472 B
ocsp.pki.goog/gts1c3
216.58.211.3200 OK472 B
yt3.ggpht.com/Y7LMCPxPnFb4GRk1wCpNJX_w7O7YCWkDoa4dZJKci2v7Vu4mAcEDBJqWKkmWo0AJWh38krto=s68-c-k-c0x00ffffff-no-rj
142.250.74.161200 OK2.2 kB
ocsp.pki.goog/gts1c3
216.58.211.3200 OK472 B
notix.io/event
139.45.240.92200 OK15 B
notix.io/event
139.45.240.92200 OK15 B
notix.io/event
139.45.240.92200 OK15 B
notix.io/event
139.45.240.92200 OK15 B
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffda40dcf-1e5b-4e49-bd65-084935f52db9.jpeg
34.120.237.76200 OK6.8 kB
finance-ru.com/javascripts/iframe-step2.min.js
172.67.128.16200 OK0 B
www.youtube.com/embed/AJshl3TO4ZQ?feature=oembed&color&autopause=0&loop=0&muted=0&title=1&portrait=1&byline=1
142.250.74.174200 OK0 B
www.youtube.com/embed/IjPn33QxMIY?feature=oembed&color&autopause=0&loop=0&muted=0&title=1&portrait=1&byline=1
142.250.74.174200 OK0 B
notix.io/ent/current/enot.min.js
139.45.240.92200 OK0 B
www.youtube.com/embed/fmM9N-ZufTU?feature=oembed&color&autopause=0&loop=0&muted=0&title=1&portrait=1&byline=1
142.250.74.174200 OK0 B
www.finpronance.com/quantum-system-ru-2-fcm/?clickid=wen0bi267fu795cm216v94ca&tracking=voluum&campaignId=10477bcb-3bcd-4d70-ad75-ec870e0c4ea8&campaignName=FICRM%20-%20QUANTUM%20SYSTEM%20-%20RU%20-%201%20STEPS%20-%201%20PART&trafficSource=1dd169ec-8d44-41e2-9760-ff67f9e9d920
188.114.97.1200 OK0 B
finance-ru.com/step-2/ficrm/Quantum-System-RU-1-PART?clickid=wen0bi267fu795cm216v94ca&tracking=voluum&campaignId=10477bcb-3bcd-4d70-ad75-ec870e0c4ea8&campaignName=FICRM+-+QUANTUM+SYSTEM+-+RU+-+1+STEPS+-+1+PART&trafficSource=1dd169ec-8d44-41e2-9760-ff67f9e9d920
172.67.128.16200 OK0 B
finance-ru.com/step-2/ficrm/Quantum-System-RU-1-PART?clickid=wen0bi267fu795cm216v94ca&tracking=voluum&campaignId=10477bcb-3bcd-4d70-ad75-ec870e0c4ea8&campaignName=FICRM+-+QUANTUM+SYSTEM+-+RU+-+1+STEPS+-+1+PART&trafficSource=1dd169ec-8d44-41e2-9760-ff67f9e9d920
172.67.128.16200 OK0 B